// Copyright (c) 2015 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#include "net/ssl/ssl_config.h"

#include "net/cert/cert_verifier.h"
#include "testing/gtest/include/gtest/gtest.h"

namespace net {

namespace {

    void CheckCertVerifyFlags(SSLConfig& ssl_config,
        bool rev_checking_enabled,
        bool verify_ev_cert,
        bool cert_io_enabled,
        bool rev_checking_required_local_anchors)
    {
        ssl_config.rev_checking_enabled = rev_checking_enabled;
        ssl_config.verify_ev_cert = verify_ev_cert;
        ssl_config.cert_io_enabled = cert_io_enabled;
        ssl_config.rev_checking_required_local_anchors = rev_checking_required_local_anchors;
        int flags = ssl_config.GetCertVerifyFlags();
        if (rev_checking_enabled)
            EXPECT_TRUE(flags & CertVerifier::VERIFY_REV_CHECKING_ENABLED);
        else
            EXPECT_FALSE(flags & CertVerifier::VERIFY_REV_CHECKING_ENABLED);
        if (verify_ev_cert)
            EXPECT_TRUE(flags & CertVerifier::VERIFY_EV_CERT);
        else
            EXPECT_FALSE(flags & CertVerifier::VERIFY_EV_CERT);
        if (cert_io_enabled)
            EXPECT_TRUE(flags & CertVerifier::VERIFY_CERT_IO_ENABLED);
        else
            EXPECT_FALSE(flags & CertVerifier::VERIFY_CERT_IO_ENABLED);
        if (rev_checking_required_local_anchors) {
            EXPECT_TRUE(flags & CertVerifier::VERIFY_REV_CHECKING_REQUIRED_LOCAL_ANCHORS);
        } else {
            EXPECT_FALSE(flags & CertVerifier::VERIFY_REV_CHECKING_REQUIRED_LOCAL_ANCHORS);
        }
    }

} // namespace

TEST(SSLConfigTest, GetCertVerifyFlags)
{
    SSLConfig ssl_config;
    CheckCertVerifyFlags(ssl_config,
        /*rev_checking_enabled=*/true,
        /*verify_ev_cert=*/true,
        /*cert_io_enabled=*/true,
        /*rev_checking_required_local_anchors=*/true);

    CheckCertVerifyFlags(ssl_config,
        /*rev_checking_enabled=*/false,
        /*verify_ev_cert=*/false,
        /*cert_io_enabled=*/false,
        /*rev_checking_required_local_anchors=*/false);

    CheckCertVerifyFlags(ssl_config,
        /*rev_checking_enabled=*/true,
        /*verify_ev_cert=*/false,
        /*cert_io_enabled=*/false,
        /*rev_checking_required_local_anchors=*/false);

    CheckCertVerifyFlags(ssl_config,
        /*rev_checking_enabled=*/false,
        /*verify_ev_cert=*/true,
        /*cert_io_enabled=*/false,
        /*rev_checking_required_local_anchors=*/false);

    CheckCertVerifyFlags(ssl_config,
        /*rev_checking_enabled=*/false,
        /*verify_ev_cert=*/false,
        /*cert_io_enabled=*/true,
        /*rev_checking_required_local_anchors=*/false);

    CheckCertVerifyFlags(ssl_config,
        /*rev_checking_enabled=*/false,
        /*verify_ev_cert=*/false,
        /*cert_io_enabled=*/false,
        /*rev_checking_required_local_anchors=*/true);
}

} // namespace net
